Director IT Controls and Compliance - Corporate

Job Summary

We are seeking a dynamic Director of IT Controls and Compliance. As a leader in our security strategy, you will drive the development and implementation of a robust compliance program, ensuring the security and integrity of our systems and data. You will navigate the complexity of a large company's Governance, Risk, and Controls (GRC) landscape, further integrating control, compliance, and risk management into a seamless function. In addition, you will build and foster strong relationships across the organization and communicate effectively to stakeholders. You will maintain IT compliance, manage audits for internal functions and regulators, and address complex challenges related to audits, risk management, 3rd party risk, supplier risk, vendor risk, and customer security programs.

Key Job Functions

• Manage the implementation ITGC controls. Manage and direct IT Compliance and application controls activities, risk assessment controls rationalization, and controls optimization processes.
• Own and manage ongoing IT Compliance audits/assessments. Collaborate regularly with internal/external audit teams and regulators during compliance initiatives to ensure alignment, manage project, and ensure efficient and effective deliver of audit engagements.
• Manage and address audit findings, from intake to resolution, and work to improve control environments based on audit recommendations with subject matter expertise.
• Develop, implement, and maintain IT governance frameworks and practices aligned with industry standards and regulatory requirements.
• Viewed as the subject matter expertise in assessing, designing and implementing ITGC requirements. Review new systems architecture and determine scoping for ITGC and IT application controls.
• Work cross-functionally on all technology implementation projects to provide IT controls expertise and test controls to meet financial and information security requirements.
• Establish and enforce IT policies, procedures, and controls to mitigate risks and ensure compliance with internal policies and external regulations.
• Ensure compliance with industry regulations (Sarbanes-Oxley, Gaming Reg, PCI DSS, CCPA, etc.)
• A strong bias towards automation, analytics, and innovative thinking. Cultivate existing toolset to drive continuous monitoring and efficiency of compliance initiatives.
• Provide training and awareness programs to enterprise IT compliance requirements.
• Foster a culture of understanding and commitment to IT compliance.
• Prepare and present IT compliance reports to executive leadership.
• Communicate effectively with stakeholders on the status of IT SOX compliance initiatives.
• Lead, grow, and develop GRC staff and perform talent development activities.

Education and Experience

• Bachelor's degree in Information Systems, Computer Science or related discipline required. 
• Professional certification (CISA, CISSP, CISM, or equivalent) is strongly preferred.
• 10+ years Internal/External Audit, IT Risk & Compliance, GRC, IT Security experience, preferably Gaming experience
• Experiencing managing IT Compliance programs (e.g., SOX, Gaming Regulatory, PCI, Penetration Assessments, etc.) along with the strong IT process, risk, and control knowledge
• Solid knowledge and experience of IT t controls across domains such as access, change management, operations, application controls, and reports testing.
• Successful track record of building teams, mentoring, and developing talent.
• Demonstrated ability to work successfully in a fast-paced, cross-functional team environment.
• Experience in network architecture and security is strongly preferred. 
• Familiarity with UNIX, AS400, and other standard operating systems preferred. 
• Proficiency in computer-assisted audit tools such as Alteryx and scripting/programming is preferred.
• Ability to work in a very detailed manner while keeping the broader view in sight, make connections, and develop the underlying themes required.

 Qualifications (and Work Environment)

• The ability to obtain occupational licensing in various gaming jurisdictions is required.
• Ability to travel to US and international locations up to 25% required.
• Ability to work independently and follow through, with limited supervision required.
• Ability to identify and address critical issues required.
• Excellent time management, interpersonal, and presentation skills required.
• Ability to manage multi-faceted projects required.
• Ability to read, write, speak, and understand English required.

 This role can be remote or hybrid (near Caesars Property).

Remote option is available for employees located in the followi